Doing so would make me consider the protocol broken. A main goal of key agreement protocols like DH is the key's freshness. Reusing old keys for DH is therefore exactly what should be avoided.
If you do not care about good keys, disable DH and switch to plain RSA or something similar - don't know if that is possible with strongswan anyway... Regards, Steffen On 03.12.2013 05:14, Chinmaya Dwibedy wrote: > > Hi, > The Diffe Hellman exchange consists of CPU-intensive operations like > key-pair generation and shared-secret generation. Does strongswan > (5.0.4) have any options to cache and reuse the diffie-hellman keys for > enhanced IKE setup rate? > > Thanks in advance for your support and help. > > Regards, > Chinmaya > > > _______________________________________________ > Users mailing list > [email protected] > https://lists.strongswan.org/mailman/listinfo/users > _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
